MAL-2025-164729 Malicious code in rino-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe19b42dee89c876b8d299f6694aafda05151f80e1f085389221e508f1aadfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164592 Malicious code in ramadan-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77ef71b81fbcecb38c85e474cedc0ff6c98fee62b2d83a4be5045a9735a42dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158180 Malicious code in lintang-tea22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b61b21dd0d8533a604392eb4d33875dc30617eaa4525aeed614d02b8a27cdab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159455 Malicious code in manadsi-sfdada-madva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4ddc0594050946d2c95225a7b1d5161a6e126dd3636c85fe5030eb7e073ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151171 Malicious code in aben-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3adae7c76a82576585e8844138e6c27550bf67f4344a140f647bd1b469ede8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156206 Malicious code in ilal-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a83618eb5b9bd4388f93cfdd61cb370f752b7cecc269858c06298c9156d04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lot-bismayuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a91b00c34774fbd5232caf79e3dd52f8b3f0dda33803db4ef35b76335ca0f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e07cd817459335d38b39c6098681c102b245a0b134bae8926cb752e9dfd468b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb35053e7c73b559f27d35bbb80c102ae1dfe2daf4d2761b57ec48f6747d7075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc76f63bca213d368b04eaa2323adcfbdd9e77a4325ca8eddca10c5f56d5829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6b1e724463960e2eae8ebd02a25b5d6b9ffa0a234d24eb7636434a05e711c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c8d7b13449d3235f07bc6a9502fc3fb950f6eea60316b8e3d062c0cac25842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd496294ffe31f49863054fb5b981b976b377ab7c589d941a665b5f26498a6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97adcc0d5c03a98c1790d7ff5e147a34efe9238daed99b5b1e49abac0a6e6ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78887c3607155ce0b6541130c0c99f2367dd7870660c41cf367d012a7f20f6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbf05c5cfad396a8ab230f6587b63401fd21821cc0c5b5208add0f5ba394f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e369753e4ab04d4eff6533df6bdfc7ced8ad8f8d4fa3b2e757de62dad378da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afagais-ifaffofda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d865e5ccc0440ea4ef88e695e098cc3610989499392f5bb92886be051b9d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutsai-aasaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c0b52cc65851d29db612af2cce78b598bea7bfd790a0efcb0192800c837884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bcec68c2bcad97d4312b74fe44b75ef5b55c30e874737a9b5d8f8af7e4015e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...